Senior Penetration Tester | Red Team & Cloud Security

EY GDS; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

EY GDS is seeking a Senior Penetration Tester to join its Cybersecurity team in the Philippines. You will perform hands-on penetration testing across web apps, networks, AD, wireless, and cloud environments, producing detailed reports and remediation guidance.

You’ll independently conduct complex security assessments, lead junior colleagues, and contribute to Red Team activities and security testing programs aligned with OWASP Top 10 and Secure SDLC practices.

Qualifications

• Bachelor’s degree in CS/IT/Engineering or equivalent.
• Minimum of 6 years of relevant penetration testing/offensive security experience.
• Hands-on testing across web apps, networks, Active Directory, cloud environments, and OT/IoT where applicable.
• OSCP/OSCE/OSEP/OSWE or CREST/eCPPT/eWPTX or similar certifications.
• Ability to mentor junior team members and clearly communicate findings.

Responsibilities

• Perform penetration testing across internet-facing and internal networks, web applications, wireless environments, and enterprise infrastructure.
• Execute Red Team and adversary simulation assessments to identify weaknesses in an organization’s security posture.
• Identify and exploit vulnerabilities across applications, networks, operating systems, and infrastructure.
• Perform Active Directory security assessments and attack simulations.
• Conduct in-depth analysis of penetration testing results and validate exploitability and business impact.
• Create comprehensive technical reports covering findings, exploitation procedures, risks, and remediation recommendations.
• Communicate complex security findings to technical teams, business stakeholders, and executive audiences.
• Perform security testing based on OWASP Top 10 and established penetration testing methodologies.
• Support application security testing, including DAST, SAST, source code review, and Secure SDLC activities.
• Develop automation to improve penetration testing, security testing, and reporting processes.
• Support security assessments involving AWS, Microsoft Azure, GCP, OT, and IoT environments where applicable.
• Provide technical guidance and mentoring to junior team members on penetration testing engagements.

Skills

Penetration testing

Offensive security

OWASP Top 10

Active Directory

Cloud security (AWS/Azure/GCP)

Network security

Windows OS

Linux/Unix

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering

Job description

EY GDS is seeking a Senior Penetration Tester to join its Cybersecurity team in the Philippines. You will perform hands-on penetration testing across web apps, networks, AD, wireless, and cloud environments, producing detailed reports and remediation guidance.

You’ll independently conduct complex security assessments, lead junior colleagues, and contribute to Red Team activities and security testing programs aligned with OWASP Top 10 and Secure SDLC practices.